CVE-2023-30756

Summary

CVE-2023-30756 is a vulnerability affecting multiple products from Siemens, including SIMATIC CP 1242-7 V2 and its SIPLUS variants, SIMATIC HMI Comfort Panels, and others, specifically all versions prior to V3.5.20. The flaw arises from an improper handling of errors by the web server when utilizing the Expect HTTP request header, leading to a NULL dereference condition. This vulnerability could be exploited by a remote attacker without privileges to cause a denial of service, severely impacting the availability of affected devices. To remediate this issue, organizations are advised to upgrade their affected devices to versions that are V3.5.20 or higher. The overall severity of this vulnerability is rated as medium, with a CVSS base score of 5.9 and an availability impact classified as high.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.